CVE-2020-36937

HIGH

7.8

CVSS Severity Score

EPSS Score0.0340%

EPSS Percentile44.85th

Published2026年1月25日

Last Modified2026年4月15日

Vulnerability Description

Microvirt MEMU Play 3.7.0 contains an unquoted service path vulnerability in the MEmusvc Windows service that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted binary path to inject malicious executables that will be run with elevated LocalSystem privileges.

Affected Platforms (CPE)

No CPE configurations currently published for this record.

References & Advisories

🔗 https://www.exploit-db.com/exploits/49016

🔗 https://www.memuplay.com/

🔗 https://www.vulncheck.com/advisories/memu-play-memusvc-unquoted-service-path

Vulnerability Description

Affected Platforms (CPE)

References & Advisories

相關漏洞威脅